go to Content
:::

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center

:::
Date:
Font-stze:

CHANGING Inc. NHIServiSignAdapter Windows Versions - Stack Overflow

TVN ID TVN-202012003
CVE ID CVE-2020-25844
CVSS 8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products CHANGING Inc. NHIServiSignAdapter for Windows 1.0.20.0218
Description The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.
Solution Update to version 1.0.20.1109
Credit Angelboy (DEVCORE https://devco.re)
Public Date 2020-12-31
Top